CVE-2025-52635

HCL AION is susceptible to Trusted types in scripts not enforced in CSP

State
Published
Severity
3.7 Low
Published
Oct 10, 2025
Updated
Oct 10, 2025
Reserved
Jun 18, 2025

Read the record on cve.org

Description

A

rusted types in scripts not enforced in CSP vulnerability has been identified

in HCL AION.This issue affects AION: 2.0.

Scores

CVSSScoreVectorSource
3.13.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NHCL

Weaknesses

Affected Products

ProductVersions
AIONHCL
  • 2.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.